indexo.dev

jou.nl

.nl crawl

First seen 2026-05-31 · Last seen 2026-06-03 · ok HTTP/1.1 200 580 ms crawled 2026-06-01

NL · 178.22.56.113 · AS12859 BIT BV

Reputation 100/100

Classifying

HTML metadata

Title
Home | JOU
Language
nl
Canonical
https://www.jou.nl/

Open Graph

title
Home | JOU

Technology

Server
nginx
CMS
Next.js
Social widgets
  • YouTube Embed

Third-party hosts loaded (3)

  • img.youtube.com×13
  • www.youtube.com×13
  • policy.app.cookieinformation.com×1

Social

Contact

Address
Pieterstraat 1, 3512 JT, Utrecht, Utrecht, NL

DNS records live

NS
  • ns0.transip.net
  • ns1.transip.nl
  • ns2.transip.eu
MX
  • 0 jou-nl.mail.protection.outlook.com
Verified for
  • Apple
  • Brevo
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:_spf.exonet.nl -all
strict (-all)
DMARC
v=DMARC1; p=reject; pct=100
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuojE1B7ukB54TEAzNGqU3rBo4fW/shRI+08DKthn59JKYprJTO+1TWrYzlD07Mp+q+03aDm5J3nHf…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lDm1QIl1+nQ5znNnEkP4tiopteZW1BY4FFBcXH553tGXadwzpVdOaOu28H0wNwSUCKvrDC44g7VlI…
selectors probed

Certificate (current)

R12
from 2026-05-24 to 2026-08-22
Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.jou.nl/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
ALLOW-FROM https://backend.stichting-pk.nl
permissions-policy
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), usb=(), web-share=(self)
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://policy.app.cookieinformation.com https://stichting-pk.piwik.pro https://stichting-pk.containers.piwik.pro https://www.youtube.com https://www.youtube-nocookie.com https://*.google.com https://cdn.userway.org https://www.gstatic.com https://*.algolia.net https://*.algolianet.com; style-src 'self' 'unsafe-inline' https://cdn.userway.org https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' blob: data: https://maps.googleapis.com https://maps.gstatic.com https://img.youtube.com https://i.ytimg.com https://cdn.userway.org; font-src 'self' https://cdn.userway.org https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://maps.googleapis.com https://policy.app.cookieinformation.com https://stichting-pk.piwik.pro https://stichting-pk.containers.piwik.pro https://*.userway.org https://consent.app.cookieinformation.com https://*.google.com https://*.al
strict-transport-security
max-age=31536000;

Links to (6)

Linked from (1)